Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json)
Hash identifier: JfMoFE1MSwzGCe8BQDwZf8Qb4uNpd0E3aDV3Q+ys8eY=
Subject key identifier: 6B:AC:78:28:16:8D:4F:1D:F2:D9:3B:19:19:98:61:C9:AC:E1:BF:94
Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3
Certificate serial: 0198D5F1A73F81F655CA60EDBCE3AD229233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
Manifest number: 040F
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: DBEbfnANUDUxkDQ85WpcaiSpj+4ypl5w4BEKzAafsvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a7:3f:81:f6:55:ca:60:ed:bc:e3:ad:22:92:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=6bac7828168d4f1df2d93b19199861c9ace1bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:03:76:38:5e:f7:03:55:d2:e3:e8:00:f1:
a4:f2:4c:90:7d:b1:e6:27:a7:3a:b0:cd:bf:94:af:
6e:a8:45:9f:f5:68:71:2f:f6:c6:aa:63:d5:fd:6f:
05:e2:d8:d7:8e:d8:35:8b:a4:6f:db:62:11:40:06:
57:d5:29:e3:28:a1:2d:5f:97:c6:51:ba:25:97:42:
68:ba:32:31:30:16:3f:e5:9b:ab:01:61:a7:5c:5c:
74:cd:13:3b:f9:82:21:36:cd:38:fe:61:52:38:91:
eb:e3:d9:aa:44:6f:f5:8b:09:e4:ec:6e:77:50:54:
89:15:92:cf:68:6a:62:ed:3a:16:08:05:b1:89:64:
cf:18:3f:1d:d1:9a:1d:ec:94:89:af:7d:6e:8b:1b:
07:d9:a4:5c:ed:6d:8b:a5:a9:ce:59:93:26:d9:21:
46:bc:1a:61:53:27:0a:b9:f6:ae:c1:36:8c:f4:3c:
86:53:d4:cf:bb:af:2c:a9:70:a8:9c:c5:f8:1f:8b:
d9:5a:47:a4:fe:9d:76:e1:e0:cc:d2:e7:af:d8:cd:
aa:47:f1:30:ba:1f:da:a1:1c:29:f2:62:7e:76:9f:
9e:67:0c:c0:c5:a0:b6:e1:4f:1f:3c:1b:fd:9a:4e:
29:f2:a5:7b:ea:2b:49:df:7c:12:cc:2d:71:fc:dd:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AC:78:28:16:8D:4F:1D:F2:D9:3B:19:19:98:61:C9:AC:E1:BF:94
X509v3 Authority Key Identifier:
keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:36:67:dd:c0:07:7b:c4:6c:10:ac:57:48:e2:08:e7:f9:8b:
04:03:4d:87:99:eb:8f:dc:86:4c:0e:0f:d9:a3:35:d0:86:c0:
5f:a5:85:54:ba:33:8e:f6:98:f7:0a:e8:46:b6:d3:92:74:a6:
6c:0e:6c:ba:34:ae:fc:19:02:19:97:17:e1:ea:49:2d:84:7a:
6a:b1:74:12:8e:92:d2:a2:82:d3:21:b2:77:1d:26:73:73:a4:
9a:fe:38:ea:f9:0f:cc:a7:d5:ee:c4:d2:d8:c4:b6:fa:d6:63:
7a:c8:fc:09:42:55:86:2b:df:04:2c:f7:8c:d8:7f:ef:8e:bf:
11:20:4f:a9:aa:49:ac:23:79:ab:e7:fa:72:e2:cc:71:65:1d:
bf:b7:ac:92:0b:91:e6:bb:e9:f5:b7:ef:cf:91:39:d5:5a:36:
79:bb:d0:e6:25:07:de:33:e2:23:a4:ea:5b:8c:66:55:b6:3b:
74:09:aa:ec:13:c6:a7:2c:b0:3b:77:b7:ad:ac:d9:7b:b7:69:
24:cd:47:c8:78:e7:e1:24:eb:c3:05:79:9c:e4:4f:e1:41:28:
5d:06:f2:56:63:d3:4c:3e:19:f7:18:a4:da:b1:08:b1:28:c3:
95:1f:d0:22:2d:94:d9:17:22:f6:ae:df:e8:c7:ca:a3:77:5e:
0e:1c:ec:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:12 2025 by rpki-client